Skip to content

req-resp/litep2p: Reject inbound requests from banned peers#7158

Merged
lexnv merged 5 commits intomasterfrom
lexnv/drop-req-for-banned
Jan 15, 2025
Merged

req-resp/litep2p: Reject inbound requests from banned peers#7158
lexnv merged 5 commits intomasterfrom
lexnv/drop-req-for-banned

Conversation

@lexnv
Copy link
Contributor

@lexnv lexnv commented Jan 14, 2025

This PR rejects inbound requests from banned peers (reputation is below the banned threshold).

This mirrors the request-response implementation from the libp2p side.
I won't expect this to get triggered too often, but we'll monitor this metric.

While at it, have registered a new inbound failure metric to have visibility into this.

Discovered during the investigation of: #7076 (comment)

cc @paritytech/networking

@lexnv lexnv added T0-node This PR/Issue is related to the topic “node”. I5-enhancement An additional feature request. labels Jan 14, 2025
@lexnv lexnv self-assigned this Jan 14, 2025
Signed-off-by: Alexandru Vasile <[email protected]>
@lexnv lexnv enabled auto-merge January 15, 2025 10:35
@lexnv lexnv added this pull request to the merge queue Jan 15, 2025
Merged via the queue into master with commit ef064a3 Jan 15, 2025
@lexnv lexnv deleted the lexnv/drop-req-for-banned branch January 15, 2025 11:57
github-actions bot pushed a commit that referenced this pull request Jan 15, 2025
This PR rejects inbound requests from banned peers (reputation is below
the banned threshold).

This mirrors the request-response implementation from the libp2p side.
I won't expect this to get triggered too often, but we'll monitor this
metric.

While at it, have registered a new inbound failure metric to have
visibility into this.

Discovered during the investigation of:
#7076 (comment)

cc @paritytech/networking

---------

Signed-off-by: Alexandru Vasile <[email protected]>
(cherry picked from commit ef064a3)
@paritytech-cmd-bot-polkadot-sdk
Copy link
Contributor

Successfully created backport PR for stable2407:

github-actions bot pushed a commit that referenced this pull request Jan 15, 2025
This PR rejects inbound requests from banned peers (reputation is below
the banned threshold).

This mirrors the request-response implementation from the libp2p side.
I won't expect this to get triggered too often, but we'll monitor this
metric.

While at it, have registered a new inbound failure metric to have
visibility into this.

Discovered during the investigation of:
#7076 (comment)

cc @paritytech/networking

---------

Signed-off-by: Alexandru Vasile <[email protected]>
(cherry picked from commit ef064a3)
@paritytech-cmd-bot-polkadot-sdk
Copy link
Contributor

Successfully created backport PR for stable2409:

github-actions bot pushed a commit that referenced this pull request Jan 15, 2025
This PR rejects inbound requests from banned peers (reputation is below
the banned threshold).

This mirrors the request-response implementation from the libp2p side.
I won't expect this to get triggered too often, but we'll monitor this
metric.

While at it, have registered a new inbound failure metric to have
visibility into this.

Discovered during the investigation of:
#7076 (comment)

cc @paritytech/networking

---------

Signed-off-by: Alexandru Vasile <[email protected]>
(cherry picked from commit ef064a3)
@paritytech-cmd-bot-polkadot-sdk
Copy link
Contributor

Successfully created backport PR for stable2412:

EgorPopelyaev pushed a commit that referenced this pull request Jan 15, 2025
Backport #7158 into `stable2409` from lexnv.

See the
[documentation](https://github.com/paritytech/polkadot-sdk/blob/master/docs/BACKPORT.md)
on how to use this bot.

<!--
  # To be used by other automation, do not modify:
  original-pr-number: #${pull_number}
-->

Co-authored-by: Alexandru Vasile <[email protected]>
EgorPopelyaev pushed a commit that referenced this pull request Jan 15, 2025
…ned peers (#7182)

Backport #7158 into `stable2412` from lexnv.

See the
[documentation](https://github.com/paritytech/polkadot-sdk/blob/master/docs/BACKPORT.md)
on how to use this bot.

<!--
  # To be used by other automation, do not modify:
  original-pr-number: #${pull_number}
-->

Co-authored-by: Alexandru Vasile <[email protected]>
ordian added a commit that referenced this pull request Jan 16, 2025
* master: (33 commits)
  Implement `pallet-asset-rewards` (#3926)
  [pallet-revive] Add host function `to_account_id` (#7091)
  [pallet-revive] Remove revive events (#7164)
  [pallet-revive] Remove debug buffer (#7163)
  litep2p: Provide partial results to speedup GetRecord queries (#7099)
  [pallet-revive] Bump asset-hub westend spec version (#7176)
  Remove 0 as a special case in gas/storage meters (#6890)
  [pallet-revive] Fix `caller_is_root` return value (#7086)
  req-resp/litep2p: Reject inbound requests from banned peers (#7158)
  Add "run to block" tools (#7109)
  Fix reversed error message in DispatchInfo (#7170)
  approval-voting: Make importing of duplicate assignment idempotent (#6971)
  Parachains: Use relay chain slot for velocity measurement (#6825)
  PRDOC: Document `validate: false` (#7117)
  xcm: convert properly assets in xcmpayment apis (#7134)
  CI: Only format umbrella crate during umbrella check (#7139)
  approval-voting: Fix sending of assignments after restart (#6973)
  Retry approval on availability failure if the check is still needed (#6807)
  [pallet-revive-eth-rpc] persist eth transaction hash (#6836)
  litep2p: Sufix litep2p to the identify agent version for visibility (#7133)
  ...
Nathy-bajo pushed a commit to Nathy-bajo/polkadot-sdk that referenced this pull request Jan 21, 2025
…ch#7158)

This PR rejects inbound requests from banned peers (reputation is below
the banned threshold).

This mirrors the request-response implementation from the libp2p side.
I won't expect this to get triggered too often, but we'll monitor this
metric.

While at it, have registered a new inbound failure metric to have
visibility into this.

Discovered during the investigation of:
paritytech#7076 (comment)

cc @paritytech/networking

---------

Signed-off-by: Alexandru Vasile <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

I5-enhancement An additional feature request. T0-node This PR/Issue is related to the topic “node”.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants